CVEvulnerability
CVE-2002-1375
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2002-12-23
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
The COM_CHANGE_USER command in MySQL 3.x before 3.23.54, and 4.x to 4.0.6, allows remote attackers to execute arbitrary code via a long response.
Affected configurations
• oracle mysql 3.22.26
• oracle mysql 3.22.27
• oracle mysql 3.22.28
• oracle mysql 3.22.29
• oracle mysql 3.22.30
• oracle mysql 3.22.32
• oracle mysql 3.23.2
• oracle mysql 3.23.3
• oracle mysql 3.23.4
• oracle mysql 3.23.5
• oracle mysql 3.23.8
• oracle mysql 3.23.9
• oracle mysql 3.23.10
• oracle mysql 3.23.23
• oracle mysql 3.23.24
• oracle mysql 3.23.25
• oracle mysql 3.23.26
• oracle mysql 3.23.27
• oracle mysql 3.23.28
• oracle mysql 3.23.29
• oracle mysql 3.23.30
• oracle mysql 3.23.31
• oracle mysql 3.23.34
• oracle mysql 3.23.36
• oracle mysql 3.23.37
• oracle mysql 3.23.38
• oracle mysql 3.23.39
• oracle mysql 3.23.40
• oracle mysql 3.23.41
• oracle mysql 3.23.42
• oracle mysql 3.23.43
• oracle mysql 3.23.44
• oracle mysql 3.23.45
• oracle mysql 3.23.46
• oracle mysql 3.23.47
• oracle mysql 3.23.48
• oracle mysql 3.23.49
• oracle mysql 3.23.50
• oracle mysql 3.23.51
• oracle mysql 3.23.52
• oracle mysql 3.23.53
• oracle mysql 3.23.53a
• oracle mysql 4.0.0
• oracle mysql 4.0.1
• oracle mysql 4.0.2
• oracle mysql 4.0.3
• oracle mysql 4.0.5a
• symantec veritas netbackup advanced reporter 3.4
• symantec veritas netbackup advanced reporter 4.5
• symantec veritas netbackup advanced reporter 4.5 fp1
• symantec veritas netbackup advanced reporter 4.5 fp2
• symantec veritas netbackup advanced reporter 4.5 fp3
• symantec veritas netbackup advanced reporter 4.5 mp1
• symantec veritas netbackup advanced reporter 4.5 mp2
• symantec veritas netbackup advanced reporter 4.5 mp3
• symantec veritas netbackup global data manager 4.5
• symantec veritas netbackup global data manager 4.5 fp1
• symantec veritas netbackup global data manager 4.5 fp2
• symantec veritas netbackup global data manager 4.5 fp3
• symantec veritas netbackup global data manager 4.5 mp1
… and 2 more
References
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000555 distro.conectiva.com.br
- http://marc.info/?l=bugtraq&m=103971644013961&w=2 marc.info
- http://marc.info/?l=bugtraq&m=104004857201968&w=2 marc.info
- http://marc.info/?l=bugtraq&m=104005886114500&w=2 marc.info
- http://security.e-matters.de/advisories/042002.html security.e-matters.de
- http://www.debian.org/security/2002/dsa-212 www.debian.org
- http://www.linuxsecurity.com/advisories/engarde_advisory-2660.html Patch, Vendor Advisory
- http://www.mandrakesoft.com/security/advisories?name=MDKSA-2002:087 www.mandrakesoft.com
- http://www.novell.com/linux/security/advisories/2003_003_mysql.html www.novell.com
- http://www.redhat.com/support/errata/RHSA-2002-288.html www.redhat.com
- http://www.redhat.com/support/errata/RHSA-2002-289.html www.redhat.com
- http://www.redhat.com/support/errata/RHSA-2003-166.html www.redhat.com
- http://www.securityfocus.com/advisories/5269 www.securityfocus.com
- http://www.securityfocus.com/bid/6375 Patch, Vendor Advisory
- http://www.trustix.net/errata/misc/2002/TSL-2002-0086-mysql.asc.txt www.trustix.net
- https://exchange.xforce.ibmcloud.com/vulnerabilities/10848 exchange.xforce.ibmcloud.com
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000555 distro.conectiva.com.br
- http://marc.info/?l=bugtraq&m=103971644013961&w=2 marc.info
- http://marc.info/?l=bugtraq&m=104004857201968&w=2 marc.info
- http://marc.info/?l=bugtraq&m=104005886114500&w=2 marc.info
- http://security.e-matters.de/advisories/042002.html security.e-matters.de
- http://www.debian.org/security/2002/dsa-212 www.debian.org
- http://www.linuxsecurity.com/advisories/engarde_advisory-2660.html Patch, Vendor Advisory
- http://www.mandrakesoft.com/security/advisories?name=MDKSA-2002:087 www.mandrakesoft.com
- http://www.novell.com/linux/security/advisories/2003_003_mysql.html www.novell.com
- http://www.redhat.com/support/errata/RHSA-2002-288.html www.redhat.com
- http://www.redhat.com/support/errata/RHSA-2002-289.html www.redhat.com
- http://www.redhat.com/support/errata/RHSA-2003-166.html www.redhat.com
- http://www.securityfocus.com/advisories/5269 www.securityfocus.com
- http://www.securityfocus.com/bid/6375 Patch, Vendor Advisory
- http://www.trustix.net/errata/misc/2002/TSL-2002-0086-mysql.asc.txt www.trustix.net
- https://exchange.xforce.ibmcloud.com/vulnerabilities/10848 exchange.xforce.ibmcloud.com